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(57) Abstract 

A system and method that allow client devices (102) with 
different characteristics and users (116) with different preferences 
to receive customized content from servers in an open networked 
environment (130), regardless of the server's prior knowledge of 
the clients' configurations or users' preferences. The embodiments 
allow the implementation of a secure, for-pay content delivery 
system wherein content providers can deliver paid content (234) in 
an appropriate format over an open, networked environment, such 
as the Internet, to their subscribers without the fear of copyright 
violation. In particular, these embodiments prevent an authorized 
user from transferring to non-authorized users a key or other 
embodiment of a right that would allow the non-authorized users to 
access the for-pay content. 
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UNIVERSAL MOBILE ID SYSTEM AND METHOD FOR 
DIGITAL RIGHTS MANAGEMENT 

The present invention relates generally to networked computer systems and, 
particularly, to systems and methods for securely identifying a user and/or client 
computer accessing goods, services or support over a computer network. 

5 

BACKGROUND OF THE INVENTION 

As for-pay content, such as books, magazines, movies, computer programs, video 
games and sports, becomes available over the Internet, it is increasingly important 
1 0 for content providers to ensure that their material can only be accessed by 

customers with the appropriate rights (i.e., paying customers). It is also important 
the content be usable on the different types of platforms (e.g., personal computers, 
handheld devices, cellular phones) employed by users). 

1 5 There are several solutions for ensuring that only authorized users access content. 
One such solution is described in U.S. Patent 5,509,070, "Method for encouraging 
purchase of executable and non-executable software," (the '070 patent), which is 
incorporated herein for background purposes. As stated in the Abstract, this patent 
discloses: 

20 A method and apparatus of encouraging distribution, registration, and 

purchase of free copyable software and other digital information, which is 
accessed on a User's System via a Programmer's Program. Software 
tools which can be incorporated into a Programmer's Program allow the 
User to access Advanced Features of the Programmer's Program only in 

25 the presence of a valid Password which is unique to a particular Target ID 
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generated on an ID-Target such as the User's system. Advanced features 
will thus re-lock if the Password is copied to another ID-target. If a valid 
Password is not present, the User is invited to obtain one, and provided 
with the means of doing so, and of installing that Password in a place 
5 accessible to the User's System on subsequent occasions. The present 

invention also provides Programmers with means to invoke business 
operations as well as computational operations with their programs, and 
thus to automatically obtain payment from Users who elect to obtain 
passwords. 

10 

The '070 patent does not address the twin problems of optimizing the content for 
the platform to which it is downloaded and customizing the content to suit a user's 
preferences. The '070 patent also presumes a one-to-one relationship between the 
user and his platform. This limits the applicability of the invention in situations 
15 where multiple users, each possibly with different preferences and/or access rights, 
use a common platform to access for-pay content. 

A method for customizing content to suit a user's preferences and client 
capabilities is described in U.S. Patent Application Serial Number 08/742,092, 
20 "intelligent Internetwork Communication System," which is incorporated herein 
by reference. This patent application discloses a client/server system wherein a 
client relays requests for network content to a mediation server that retrieves the 
requested content and then, prior to returning the content, modifies it to be 
compatible with the platform's registered characteristics. These characteristics, 
25 which can include color depth, screen resolution, audio capabilities and memory 
size are associated with each client via a client-specific ID that is stored in a 
mediatton server database. The mediation server also can customize the content in 
accordance with registered user preferences and rights, which are associated with 
the same ID. Among other things, these preferences allow the platform user to tell 
30 the mediation server the preferred format of the downloaded content (e.g., image 
type, color depth, image scaling), display attributes (e.g., text only vs. full 
graphics) and security level (e.g., Internet access controls for children). This 
application does not address the problem of preventing copying of client IDs and 
the attendant problem of unauthorized use of for-pay content. This application also 
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does not address the issue of assigning unique, relatively un-tamperable, user 
and/or client IDs in an open environment, such as the Internet. Nor does this 
application describe how clients in an open environment can tell a server their 
device characteristics and user preferences to allow the server to appropriately 
5 customize requested for-pay content. 

Therefore, there is a need for an ID system and method that can be employed in 
open environments, such as the Internet, that provides a server with information 
about a client's capabilities and user preferences. There is a further need for an ID 
10 system and method that provides the above features in such as way as to prevent 
copying from client to another of the ID. There is a further need for such an ID 
system to be compatible with a secure system for providing for-pay content in open 
environments. 

15 

SUMMARY OF THE INVENTION 

In summary, embodiments of the present invention include systems and methods 
that allow client devices with different characteristics (e.g. display resolution, color 

20 depth, memory size, etc.) and users with different preferences to receive 

customized content from servers in an open, networked environment, regardless of 
the server's prior knowledge of the clients 5 configurations or the users' 
preferences. The embodiments also include systems and methods that allow the 
implementation of a secure, for-pay content delivery system wherein content 

25 providers can deliver paid content in an appropriate format over an open, 

networked environment, such as the Internet, to their subscribers without the fear 
of copyright violation. In particular, these embodiments prevent an authorized user 
from transferring to non-authorized users a key or other embodiment of a right that 
would allow the non-authorized users to access the for-pay content. 

30 

In one embodiment, each client is associated with a universal mobile ID (UMID) 
that designates the client's characteristics and a user's preferences. In one 
embodiment the UMID consists of two major parts: the User ID (UID) and the 
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Device ID (DID). The UTD includes information that is relevant to a user, 
including a unique, public personal identification number (PIN), preferences (e.g., 
what kind of news, sports, etc. the user is interested in) and access rights. The DID 
includes information that is relevant to a client device, including device attributes 
5 (e.g., display, processor type, multimedia capabilities, available memory s.ze) and 
client date of birth (DOB). 

A user of a client who wishes to receive server content in accordance with the 
present invention first registers with the server, which, for the purposes of the 

1 0 present application, can be a conventional server or a mediation server. In one 
embodiment the user registers by sending the server a secret PIN that is, 
presumably, uniquely associated with the client from used to access the content. 
The secret PIN can either be stored in the client's non-volatile memory at the time 
of manufacture or can be generated by a client program from presumably unique 

15 client and/or user attributes and then stored on the client. In different embodiments 
the secret PIN can be generated as follows: 

(1) Based on the assumption that no two clients are likely to be identical, 
hardware/software configuration information assumed to be unique for each client 
(e.g., Windows® registry information, dates of first creation of particular files) is 

20 used to generate the secret PIN. 

(2) Based on the assumption that some bit patterns in files stored on the 
client can be altered without affecting the client's operation, hidden files are added 
or bits are altered in existing files in a manner that has no noticeable effects. 
Patterns of bits in the added files or modified bits in the existing files are then used 

25 to generate the secret PIN. 

(3) Based on the assumption that two different persons can never be 
biologically identical, a set of one or more biometric measures, such as a person's 
handwriting, thumb print, voice print, retina pattern, typing pattern, etc., are used 
to generate the secret PIN. 

The secret PIN is preferably transmitted to the server in a secure manner to avoid 
interception. Any type of encryption or other security approach could be employed 
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for this purpose. Preferably, the secret PIN is stored on the client so that it cannot 
be easily copied. 

After receiving the secret PIN the server determines the client characteristics and 
5 the user preferences in cooperation with the client. This can be done using an 
automated, machine-to-machine protocol in which the client responds to server 
queries or by the user responding to questions or forms sent by the user. From this 
information, the server assembles the UMID, which it returns to the client. In one 
embodiment, the UMID includes a public PIN assigned by the server that uniquely 
10 identifies the user. 

Following registration, a user accesses server content by first issuing a request to 
the server along with his UMID. The server looks up the user's secret key using 
the public PIN and determines the client characteristics and user preferences based 

1 5 on the UID and DID contained in the UMID. In one embodiment, the server filters 
the content based on the UID and DID information, encrypts the content, and 
returns the encrypted content to the user along with a content-specific key. The 
user then decrypts the encrypted content using both his secret PIN and the content- 
specific key. Because the content-specific key only works with the secret PIN, 

20 which is not easily copied, the content-specific key only works on the intended 
client. 

In those situations where a secret PIN could be copied, the client can include a 
program that checks the stored secret key against the actual system configuration 
25 or biometric measure initially used to generate the secret key. Such a system can 
also be used to allow multiple users to employ a single client to access server 
content. 

In one embodiment, client programs and the users are allowed to modify some 
30 fields of the UMID before it is transmitted to the server. This allows the available 
memory, connection speed and client device locality, etc. to be modified 
dynamically and also allows a user to substitute a new set of preferences and 
access rights for the stored ones. This feature also allows a user to upgrade their 
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client device and to indicate to the server the new features. This feature further 
allows a user to input a new PIN if they are using another person's client device. 



10 



BRIEF DESCRIPTION OF THE DRAWINGS 

Additional objects and features of the invention will be more readily apparent from 
the following detailed description and appended claims when taken in conjunction 
with the drawings, in which: 

FIG. 1 is a block diagram of on open network environment in which the present 
invention can be practiced; 

FIG. 2 is a flow diagram of a registration process cooperatively executed by a 
1 5 server and client; 

FIG. 3 is a flow diagram of a content request procedure cooperatively executed by 
a server and client; and 

20 FIG 4 A is a block diagram of a client computer configured in accordance with the 
present invention; 

FIG. 4B is a block diagram of a server computer configured in accordance with the 
present invention; and 



25 



FIG. 5 shows the operation of one embodiment for generating a decryption factor 
Dfij 207ij that allows a user i to view content item j. 
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DESCRIPTION OF THE PREFERRED EMBODIMENT 

FIG. 1 is a block diagram of an open network environment in which the present 
invention can be practiced. This environment includes one or more client 
5 computers 102-i coupled to one or more servers 120 via a network 1 30. The 
clients 102 can be coupled to the network directly (e.g., via a direct connection or 
an Internet Service Provider) or via a mediation server 120, the operation of which 
is described in depth in U.S. application Serial Number 08/742,092, which is 
incorporated herein by reference. It is immaterial to the present invention whether 

10 a mediation server 120 is employed. Each client 102 has a unique set of 

characteristics, such as display resolution 104 (e.g., SGVA, VGA, CGA), display 
color depth 106 (e.g., 1-bit, 8-bit, 24-bit), memory size 108i, CPU type 1 10, World 
Wide Web (WWW) browser type 1 12 and date of birth (DOB) 1 14 (i.e., date of 
manufacture). The characteristics are not limited to those shown in FIG. 1, which 

15 are merely illustrative. A non-exhaustive list of other capabilities might include 
communication channel speed, channel protocol and client locality (e.g., city, state, 
country, time zone, etc.). 

Each client 102 can host one or more users 116, each of whom can access, via the 
20 client 102, content 234 stored on the servers 120. In some embodiments, the same 
user 1 16 can access content 234 from more than one client 102. However, in the 
interest of clarity, the first embodiment described herein is a simple embodiment 
that presumes a one-to-one relationship between clients 102 and users 1 16. The 
operation of the more flexible-embodiments (i.e., those that allow multiple users 
25 per client and multi-client users) is mostly apparent from the following description. 
Aspects of the more flexible embodiments that are not apparent from the 
description of the simple embodiment are described below. 

Each user can have one or more preferences 118 that describe how they wish to 
30 interact with the server content 234. Possible preferences 1 1 8 include: 

the type of content favored by the user (e.g., major league baseball, stock 
reports, weather for San Francisco, California); 
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the preferred format of the downloaded content (e.g., image type, color 
depth, image scaling) when it differs from the client charactenstics and 

display attributes (e.g., text only vs. full graphics). 
Each user can also have one or more access nghts 122, which, for example, can be 
5 used to limit the access of children to the Internet. 

Pnor to requesting content 234 on behalf of a user 1 16, a client communicates one 
or more of the characteristics 101, preferences 1 1 8 and access rights 122 to the 
server 120 hosting that content 234. In light of this information the server 
10 customizes the downloaded content 234 for the client 102 and user 116. Some 
techniques for customizing the content 234 (e.g., reducing color depth and data 
resolution) are described in the incorporated U.S. Patent Application Serial 
Number 08/742,092, which is incorporated herein by reference. 

15 Each client 102 (or user) also has a unique, secret and difficult (if not impossible) 
to transfer identification (ID) that is securely transmitted to a server 120 whenever 
the client's user 116 wishes to register with the server 120 to receive content 234. 
Based on this secret ID, the server 120 determines a secure transfer mode that will 
allow only the requesting user to access content downloaded to them. 

20 

Accordingly, the present invention can be the basis for a secure, for-pay content 
delivery system wherein content providers can deliver paid content in an 
appropriate format over an open, networked environment, such as the Internet, to 
their subscribers without the fear of copyright violation. A particular feature of all 
embodiments is that an authorized user is unable to transfer access rights to non- 
authorized users. Registration and content access methods are now described with 
reference to FIGS. 2 and 3. 

FIG. 2 is a flow diagram of a registration process cooperatively executed by a 
30 server 120 and a client 102. This figure shows key data and hardware components 
and enumerates steps of the registration process. In the illustrated embodiment, 
steps (2.1), (2.2) and (2.6) are performed by the client 102 and the remaining steps 
by the server 120; however, other step sequences are also possible. In the 



25 
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conventional manner, the client 102 is presumed to have a memory 150, including 
non-volatile memory 152 and volatile, system memory 154. The server 120 is 
presumed to have access to a database 230. 

5 Among other things, the client memory 150 stores a universal mobile ID (UMID) 
200 that has two components: a user ID (UID) 210 that summarizes user-specific 
data and a device ID (DID) 220 that summarizes device-specific data. The UMID 
can be stored in non-volatile memory 152 (if the client is so-configured) or the 
system memory 152, 154. The UID 210 includes, but is not limited to, a public 
10 PIN 212, user preferences 1 18 and access rights 122. The DID 220 includes device 
attributes/characteristics 222 and the clients's date of birth (DOB) 1 14. The fields 
of the UID 210 and DID 220 are described in Table 1. 



TABLE 1 



15 



ID 


Field 


Definition 


UID 210 


Public PIN 212 


a n-bit, id that is unique for every 
device 




User Preferences 118 


specifies preference of the user in 
areas such as sports, news, finance 
and etc. 




Access Rights 122 


contains information about the access 
right, such as child access to some 
pre-defined web sites (could be 
similar to the V-chip used by the TV 
industry) 


DID 220 


Device Attributes 222 


contains characteristics about the 
device, such as CPU type, display 
size, color depth, available memory 
size, etc. 




Date of Birth 114 


the date when the device was 
manufactured 
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,„ one embodimen,, ,he public PIN 2,2 is a, leas, ,,-bi.s long so .ha, ,h= Wl 
number of assignable IDs . is much smaller ,han .he number T (..=■ « «< > 
This is .o preven, someone from making coun.erfei.s by jus, picking any one 

5 number as , be public PIN. In one embodimen,, ,he UM1D 200 U programmer, a, 
„,e facory and stored in the non-vo,ati,e memory 152. In an ahemarive 
embodimen,, which is shown in FIG. 2, ,he UMID is general by a 
The information in ,he UMID 200 is no, limired ,o the ata-ve-described fields 
Generally, the UMID 200 can include any user or device infonrnation ,ha, cou d be 

10 of use ,0 me server. For example, .he user infomrarion 2,0 could include credt, or 
oebi, information ,o supper, on-line commerce and could des,gna.e parhcular 
publications ,o which ,he user wishes ,o subsenbe. The dev.ee informant,. 22 
could .nelude any hardware or software information aasoc,a,ed wi,b ,he chen that 
cou.d infiuenee ,he type/size of eon.en, ,ha, ean be downloaded ,o and/or used by 

15 the client 102. 

The present invention requires each user/elien, combination to have a unique, 
secret PIN 213, the purpose of wh.eh is described later. In one embodtmen,, the 
secret PIN 213 is at leas, „-bits long so that the total number of assignable IDs . ,s 
20 muchsmallermanthenumber2- (,,.,»<« A This is to prevent someone ftom 
makmg counterfeits byjus. picking any one number as the secret PIN. In one 
embodnnen, the secret PIN 213 is programmed a, the factory and stored m .he 
non-volatile memory 152. However, there are millions of open platforms *at 
could be used as a client .02 that are not pre-programmed with Cher a UMID 200 
25 or secret PIN 213. The embodmren. shown in FIG. 2 addresses this problem 

optional firs, s,ep(2.1) wherein the client .02 generates the score, PIN 2,3, wh,ch 

vn; mpmnrvlSl 154 In similar embodiments, 
is stored in either the system or NV memory 152, 154. in 

the secret PIN 213 can be downloaded from the server 102. 

30 in different embodiments the client 102 generates the secret PIN using information 
that is unique to the client and/or user and cannot reasonably be copied. Such 
information could include, but is not limited to, umque client hardware and/or 
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software characteristics, unique user interactions with the client device, or user 
biometrical data. Possible methods for generating the PIN include the following: 

(1) Based on the assumption that no two clients are likely to be identical, 
hardware/software configuration information assumed to be unique for each client 

5 (e.g., Windows® registry information, dates of first creation of particular files) is 
used to generate the secret PIN. 

(2) Based on the assumption that some bit patterns in files stored on the 
client can be altered without affecting the client's operation, hidden files are added 
or bits are altered in existing files in a manner that has no noticeable effects. 

10 Patterns of bits in the added files or modified bits in the existing files are then used 
to generate the secret PIN. 

(3) Based on the assumption that two different persons can never be 
biologically identical, a set of one or more biometric measures, such as a person's 
handwriting, thumb print, voice print, retina pattern, typing pattern, etc., are used 

1 5 to generate the secret PIN. 

However the secret PIN 213 is created, it is preferably stored on the client 102 in 
such a manner that it cannot be easily copied. Any number of techniques known in 
the art can be used for this purpose. These techniques range from providing 
20 special-purpose hardware protection to prevent easy access to the secret PIN 213 in 
the non-volatile memory 152, to writing parts of the secret PIN 213 to randomly 
generated secret files or to non-functional bit patterns in existing files. 

Assuming the existence of a secret PIN stored on the client 102, a user who wishes 
25 to receive server content in accordance with the present invention first registers 
with the server 102. In one embodiment the user registers by sending the server 
the secret PIN 213 (2.2). Preferably, this transmission and all other client/server 
transmissions are transmitted in a secure manner to avoid interception. Any type 
of encryption or other security approach can be employed for this purpose. 

30 

After receiving the secret PIN the server 102 determines the client characteristics 
and the user preferences in cooperation with the client. This can be done using an 
automated, machine-to-machine protocol in which the client responds to server 
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queries, or by the user responding to questions or forms sent by the server 120. 
From this information, the server 120 assembles the UMID 200 (2.3), which it 
returns to the client (2.5). In one embodiment, the UMID includes a public PIN 
2P ass,gned by the server, that uniquely identifies the user/client. Tins step (2.3) 
5 of generating the UMID 200 is optional if the UMID 200 was factory-programn.ed 
into the client 102. The server 120 then associates the public PIN 212 with the 
secret PIN 213 sent by the client (2.4). In one embodiment, the server does this by 
making a new entry in the server database 230. However, any other technology 
can be used by the server to record this relationship. The client 102 stores the 
10 UMID 200 (2.6) in the non-volatile memory to ensure its continued availability or 
Just in system memory if NV memory is not available. The UMID 200 can be 
stored without security precautions as the UMID is intended to be publicly 
exchanged with any server 102 to initiate the transmission of content. This content 
transmission process is now described with reference to FIG. 3. 

FIG 3 is a flow diagram of a content request procedure cooperatively executed by 
a server 120 and client 102. The first step (3.1) is not actually performed for every 
content request from a client, but is performed only once after the client is 
powered-up and only if the client has a non-volatile memory 152 in which the 
20 UMID 200 is stored. In this step, the client 102 copies the entire UMID 200 (FIG. 
2) from the non-volatile (NV) memory 152 to the system memory 154. Once in 
the system memory, at least a portion of the UMID 200 can be modified (3.2) to 
form an updated UMID 200'. 

25 mO neembodiment,allorsomeoftheUID210andDID220fields(FIG.2)canbe 
dynamicallymodif 1 edbytheuserll6and/ortheclientl02. For example, a user 
can enable a blocking parameter 122a in the access rights field 122 to allow his 
child to use the client device 102. By the same token, the client 102 can freely and 
dynamically modify an available memory size parameter 222a in the device 
30 attnbutes field 222 to prevent the server 120 from sending the client 102 more data 
than it has memory to handle. This feature is particularly useful for clients 102 
with a very small amount of available memory. In one embodiment, depending on 
th e value in a communication speed parameter 222b, the server 120 can decide 
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what type of content 360 should be downloaded to the client 102. For example, the 
server 120 might send just text and not streaming video over a 14.4 kilobit per 
second connection. Other device features 222 that might be dynamically modified 
include any device parameters that impact at least one of: 
5 (1) size of the content that can be stored in client memory; 

(2) bandwidth of the content that can be transmitted between the client 
computer and the server computer; 

(3) complexity of the content that can be accessed by the client computer; 

and 

1 o (4) geographic relevance of the content. 

In addition to those described above, these parameters could include, but are not 
limited to: available network capacity, processor capability, available processor 
capacity, client geographic position, and client time zone. 

1 5 A user 1 1 6 accesses server content by issuing a content request 1 03 to the server 
120 along with the updated UMID 200* (3.3) (hereinafter, references to the "UMID 
200'" should be understood also to refer to the UMID 200). Upon receiving the 
request 103 and the UMID 200' (3.4), the server 120 retrieves the user's secret PIN 
213 from the PIN database 232 using the public PIN 212 (3.5) and identifies the 

20 requested content item(s) 360 in the content repository 234 (3.6). The server 120 
filters the content 360 based on the client device attributes 222 and user 
preferences 1 18 (3.7), and then, if encryption is required, encrypts the filtered 
content 360 using an encryption key 236 that is a function of the secret PIN 213 
and, optionally, any key(s) 362 associated with the content 360 (3.8). This 

25 encryption can be accomplished using well-known encryption techniques. For 

example, in the general situation where the client and the server were not known to 
one another at birth, the encryption can be any single key, shared key or public key 
technique. As disclosed in the U.S. Patent Application Serial Number 08/742,092, 
when the client 102 and server 120 are known to each other at birth, other types of 

30 encryption can be employed, such as one-time pad encryption, that require prior 
knowledge between the parties. 
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Depending on the encryption scheme, the server 120 either returns just the 
encrypted content 205 (assuming the client 102 is able to decrypt the content using 
only internal information, such as the secret PIN 1 13), or the encrypted content 205 
and a decryption factor (DF) 207 that must be used by the client 102 in conjunction 
5 with the secret PrN 213 to decrypt the content 205 (3.9). In the latter 

embodiments, because the content-specific decryption factor 207 only works with 
the secret PIN 213, which is not easily copied, the content 360 can only be read by 
the intended client. Depending on the encryption scheme, the decryption factor 
207 can either be used in conjunction with the secret PIN 213 to recover the 
1 0 content key directly, or to derive a decryption key that is paired with the content 
key. 

The client 102 subsequently generates a decryption key (3.10) and decrypts the 
content 360 using that decryption key (3.11). When a decryption factor 207 is sent 
1 5 by the server 120, the decryption key is a function of the decryption factor 207 and 
the secret PIN 213. Otherwise, the decryption factor is a function of the secret PIN 
213 alone. 

FIG. 5 shows the operation of one embodiment for generating a decryption factor 
DFij 207ij that allows a user 1 16i to view a content item 360j. In this embodiment, 
the PIN database 232 maps public PINS 212 to secret PINS 213 for all registered 
users 1. . . m. The content database 234 associates with each item 360 a content 
key 363 for all items 1. . . n. Each content item 360 can be stored in encrypted 
form or can be encrypted with its content key 363 prior to downloading to the 
client computer 102. In any of the embodiments, an item 360 can be all or part of 
a for-pay work. For example, each different type of information in a magazine 
(text and pictures) could be treated as a separate content item 360 with its own 
content key 363. Different chapters of a book could be treated in the same manner. 
When a user 1 16i requests a content item 360j, the server couples the associated 
content key (CKj) 362j and secret PIN (SPi) 213i to a decryption factor (DF) 
generator 380. The DF generator 380 in response generates a decryption factor 
DFij 207ij that can be used by the client of the user 1 16i in combination with 
user's secret PIN 213i to access the item 360j. The relationship between the secret 
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PIN (SP), decryption factor (DF) and content key (CK) can be represented as 
follows: 

CKj =f(SPi, DFij), 

which denotes that the / content key is a function of the i' H secret PIN and the i-f 
5 decryption factor. The function/can be any function such that a DFij can always 
be determined given a CKj and SPi. The DF generator 380 solves this expression 
for DFij given the SPi and CKj read out from the PIN database 232 and the content 
database 234, respectively. Configurations of a client 102 and a server 120 in 
which the present invention can be implemented are now described with reference 
10 to FIGS. 4 A and 4B. 

FIG. 4A is a block diagram of a client computing device 102 embodiment that 
includes a client system memory 154, NV memory 152, display 306, processor 308 
and input device(s) 310. The input device is configured to receive user inputs, 

1 5 including biometric inputs 3 1 3 needed to generate and verify PINs 2 1 3 . The client 
system memory 154, which could be any combination of a fast, semiconductor 
memory, such as a RAM, or a slower, magnetic memory, includes an operating 
system 320, communication routines 322 for interacting with the network 130 and 
the servers 120, programs 324 and data 340. The data 340 can include client data 

20 generated by the client or downloaded from the server 120, such as the update 
UMID 200' and the secret PIN 213. The optional NV memory 152 can include 
important data 350, such as the UMID 200. In the conventional manner, the 
communication routines 322 and the programs 324 execute in the processor 308 
under control of the operating system. Among other things, the operating system 

25 320 provides program access to peripherals, such as the display 306, which are 
employed by users to interact with (e.g., view, listen to, play, record onto, etc.) the 
downloaded content 360. In one embodiment, the programs 324 include a client 
program 326 and security routines 330, which further include an optional PIN 
generator 332, encryptor 334, decryptor 336 and PIN verifier 338. 

30 

The client program 326 performs, with possible support from the security routines 
330, the client operations described with reference to FIGS. 2 and 3. In 
embodiments where the client 102 is not factory-configured with the secret PIN 



BNSDOCID: <W<D 



.00441 19A1_I_> 



VVOOO/441.9 PCTAJSOO/01744 

16 

213, the client program 326 can invoke the optional PIN generator program 332 to 
generate the secret PIN 213. The PIN generator 232 can use one of the techniques 
described above (i.e., biometric data, random bit patterns, random user-input) or 
similar techniques to generate the PIN 213. 

5 

In embodiments where the PIN is generated by the PIN generator program 332 
from biometric data, or other reproducable, user-specific data, the client program 
326 can employ the optional PIN verifier 338 to ensure that the user 116 who is 
attempting to access downloaded content 360 is authorized to do so. The optional 

10 PIN verifier 338 does this by prompting the user 1 16 to supply the biometric inputs 
(e.g., signature or other writing, fingerprint, voice input, retina scan, etc.) or other 
data from which the secret PIN 213 was originally generated and determining 
whether the input matches the input originally used to generate the secret PIN 213. 
The client program allows the user to unlock the content 360 only if the verifier 

15 338 verifies the match. This scheme is particularly useful in embodiments where 
multiple users 116 share one client. In this situation, secret keys for the different 
users are stored on the client device 102. PIN verification is performed whenever 
content is downloaded to the client 102 to ensure that is only viewed by the 
authorized user 116. This scheme also allows users 1 16 to be guest users of other 

20 clients 102. 

Generating the secret PIN 213 from biometric data has another value. In this 
situation, as the user essentially carries the secret PIN with them, there is no need 
to store the PIN 213 on the client at any time. Instead, at registration (see FIG. 2), 
25 the PIN generator 332 prompts the user for their biometric inputs, generates the 
secret PIN 213 and sends it in encrypted form to the server 120 without ever 
storing the PIN 213 on the client 102. The server subsequently uses the secret PIN 
213 to determine how to encrypt the requested content 360. To subsequently 
access the downloaded content the user simply provides the correct biometric 
30 inputs, which are verified by the PIN verifier 338. Yet another advantage of being 
able to process biometric inputs on the client 102 is that the PIN 213, however 
generated, can be encrypted using an encryption key generated from biometric data 
and then stored on the client 102. In this situation, the PIN verifier 338 would be 
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configured to unlock the secret PIN 213 only for the user who can provide the 
correct biometric inputs. This scheme would be useful in systems where multiple 
users access content 360 through a single client 102 and would discourage copying 
of secret PINs213. 

5 

The client program 326 employs the encryptor 334 to encrypt secret PINS 213 sent 
to the server 120 during registration and employs the decryptor 336 to decrypt 
encrypted content 205 returned by the server 120. One server embodiment is now 
described with reference to FIG. 4B. 

10 

FIG. 4B is a block diagram of a server computer 120 embodiment that includes a 
server memory 366 and processor 358. The server memory 366, which could be 
any combination of a fast, semiconductor memory, such as a RAM or a slower, 
magnetic memory, includes an operating system 370, communication routines 372 

1 5 for interacting with the network 1 30 and the clients 1 02, programs 374 and a 
database 230. In the conventional manner, the communication routines 372 and 
the programs 374 execute in the processor 358 under control of the operating 
system 370. In one embodiment, the programs 374 include a server program 386 
and security routines 390, which further include an optional PIN generator 392, DF 

20 generator 380, encryptor 394, deciyptor 396 and PIN verifier 398. 

The server program 386 performs, with possible support from the security routines 
390, the server operations described with reference to FIGS. 2, 3 and 5. In 
embodiments where the client 102 is not factory-configured with the secret PIN 
25 213, the server program 386 can invoke the optional PIN generator program 392 to 
generate the secret PIN 213. The PIN generator 232 can use one of the techniques 
described above (i.e., biometric data, random bit patterns, random user-input, 
random number generation) or similar techniques to generate the PIN 213, which is 
subsequently encrypted prior to be returned to the client 102. 

30 

The operation of the DF generator 380 has already been described with reference to 
FIG. 5. The server program 386 can employ the encryptor 394 to encrypt 
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information sent to the client 102 and can employ the decryptor 336 to decrypt 
encrypted information, such as the secret PIN 213, sent by the client 102. 

In another embodiment, content providers can allow any client 102 to download 
5 content 360 to try out for a period of time or to pass to their friends. After some 
limit has expired, a window will be opened on the client's screen to inform the user 
that payment must be made if he wants to continue to use the content. 

In particular, one embodiment of the present invention is a universal mobile ID 
10 (UMID) system for use in a computer system including a client computer 102 
employed by a user and a server computer 120 from which the client computer 
downloads content 360 via a network. This embodiment includes a public PIN 212 
associated with the client computer and at least one of: user-specific informauon 
and device specific information. The user-specific information includes at least 
15 one of user preferences 1 1 8 that can be used by the server to filter the content and 
access rights 122 that can be used by the server to limit access of the user to the 
eontent The device-specific information includes at least one of: device attributes 
222 of the client that can be used by the server to customize the content so that it is 
suitable for use on the client and date of birth (DOB) 1 14 of the client. At least a 
20 subset of the user preferences, access rights and device attributes are dynamically 
movable by any combination of the user and a client program 326 executing on 
the client computer 102. The public PIN, user-specific information and device- 
specific information are transmitted to the server 120 by the client 102 to enable 
the server to appropriately configure the content to be downloaded to the client. 

A related embodiment includes a secret PIN 213 associated with the client 102 that 
is accessible to the client and the server 120. The secret PIN 213 is used by the 
server when the content 360 is encrypted, to generate a decryption factor 207 with 
which the client 102, in conjunction with the secret PIN 213, can decrypt the 
30 encrypted content. The secret PIN can be managed in many different ways, 
including: 

(1) The secret PIN is stored on both the client and the server at birth. 
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(2) The secret PrN is stored on the client 102 and is encrypted prior to 
storage with an encryp tion ke Y derived at least partially using biometric 
information taken from the user. 

(3) The secret PIN is generated by a client security program 332 executing 
5 on the client and is transmitted to the server in a secure manner. 



In different embodiments the secret PrN 213 can be generated in many different 
ways, including: hardware/software configuration information assumed to be 
unique for the client, patterns of bits in selected files stored on the client, and a set 
10 of biometric information 313 associated with the user. 

In one embodiment, when the secret PIN 213 is generated using biometric 
information 313, the secret PIN is not stored on the client. Alternatively, if the 
secret PIN is stored on the client it is stored in a secure manner. 

15 

In one embodiment, the public PIN 212, user-specific information, device-specific 
information and date of birth (DOB) 1 14 are stored on the client at birth. In 
another embodiment, the public PIN, user-specific information and device-specific 
information are generated by the server in response to questions answered by the 
20 user and then downloaded to the client. 

In various embodiments, the user preferences 1 18 can include: types of content in 
which the user is interested, image type, color depth, image scaling, and display 
attributes. The access rights 122 can include blocking rights 122a. The device 
25 attributes 222 can include: memory size 222a, connection speed to the network 
222b, and client device locality. 

Another embodiment is a method for providing digital rights management in an 
open, networked environment wherein a client computer is employed by a user to 
30 download content from a server computer via a network. The method embodiment 
includes: 

assigning the client a secret PIN 213; 
registering the secret PIN with the server 120; 
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assigning the client a universal mobile ID (UMID) 200, which includes: 
a public PIN 212 associated with the client computer; and at least 

one of: 

user-specific information, including at least one of: 
5 user preferences 1 1 8 that can be used by the server to filter 

the content; and 

access rights 122 that can be used by the server to limit 

access of the user to the content; and 

device-specific information, including at least one of: 
1 0 device attributes 222 of the client that can be used by the 

server to customize the content so that it is suitable for use on the client; and 
date of birth (DOB) 1 14 of the client; 
associating in the server 120 the secret PIN and the public PIN; 
determining content 360 stored on the server to be downloaded to the 

15 client; 

customizing content to be downloaded to the server using at least a subset 

of the UMID 200; 

encrypting on the server 1 20 the content to be downloaded; 

downloading the encrypted content 205 to the client; and 
20 decrypting on the client the encrypted content using a decryption key 

derived from the secret PIN. 

In another embodiment, the method can also include: associating with a content 
item 360 a respective content key 362, encrypting the content item 360 with the 
25 respective content key 362, and determining from the content key associated with 
the content to be downloaded and the secret PIN 213 of the user a decryption factor 
207. In this embodiment, the client employs the decryption factor and the secret 
PIN to derive the decryption key, which the client uses to access the encrypted 



content. 



30 



Yet another embodiment encompasses a secret PIN 213 associated with a client 
102 configured to download encrypted content 205 from a server 120. In this 
embodiment: 
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the secret PIN 213 is accessible to the client and the server; 

the secret PIN is used by the server to generate a decryption factor 207 with 
which the client, in conjunction with the secret PIN, can decrypt the encrypted 
content 205; 

5 the secret PIN 213 is reliably generated by the client 102 anytime it is 

needed; and 

neither the secret PIN 213 nor data used to generate the secret PIN 213 are 
stored on the client 102. 

1 0 An additional embodiment is a dynamic, universal mobile ID 200 for use in a 
client computer 102 configured to download content 360 from a server computer 
120. The dynamic, universal mobile ID includes device information 222 that 
describes configuration of the client. At least a subset of the device information 
222 can be dynamically modified by the client computer. The dynamic universal 

1 5 mobile ID 200 is transmitted to the server computer 120 to enable the server 
computer to customize the content 360 to be downloaded to the client computer 
102. In a particular embodiment, the subset of the device information includes 
device parameters impacting at least one of: size of the content that can be stored 
in client memory, bandwidth of the content that can be transmitted between the 

20 client computer and the server computer, complexity of the content that can be 
accessed by the client computer, and geographic relevance of the content. 

In a particular embodiment of the dynamic, universal mobile ID, the device 
parameters 222 can include at least one of: network connection speed between the 
25 client and server computers, available network capacity, processor capability, 
available processor capacity, available client memory, client geographic position, 
and client time zone. 

Another embodiment is a method for enabling a client computer 102 to download 
30 and use encrypted content 205 from a server computer 120. This method includes 
a registration phase and a downloading phase. The registration phase includes: the 
client 102 transmitting to the server 120 a secret PIN 213 associated with the client 
computer 102, and the server 120 associating with the secret PIN 213 a public PIN 
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212 associated with the client computer 102. The downloading phase includes: the 
client 102 issuing a request 103 to the server 120 for the encrypted content, the 
client identifying itself as the source of the request using the public PIN 212, the 
server looking up the secret PIN 213 using the public PIN, the server 120 
5 generating a decryption factor 207 based on the secret PIN 2 1 3 that can be used by 
the client 102 in conjunction with the secret PIN 213 to decrypt the encrypted 
content 205, and the server 102 transmitting the encrypted content 205 and the 
decryption factor 207 to the client 102. 

10 In an alternate embodiment, a user 1 16 can receive content 360 from the server 120 
without issuing a request 103. Instead, in what is referred to as push-mode 
operation, the user 116 can subscribe to particular types of content specified in 
their UMID 200, which the server 120 downloads as appropriate (e.g., whenever 
the next edition of an online newspaper to which the user subscribes is published). 

15 The server 120 can charge the client for any for-pay information using credit or 
debit information that could be contained in the UMID 200 or sent to the server 
120 during the registration phase. 

While the present invention has been described with reference to a few specific 
20 embodiments, the description is illustrative of the invention and is not to be 
construed as limiting the invention. Various modifications may occur to those 
skilled in the art without departing from the true spirit and scope of the invention 
as defined by the appended claims. 



BNSDOCID: <WO 0044119A1J„> 



WO 00/44119 



PCT/US00/0I744 



23 

WHAT IS CLAIMED IS: 

1 . A universal mobile ID (UMID) system for use in a computer system 
including a client computer employed by a user and a server computer from which 

5 the client computer downloads content via a network, comprising: 

a public PIN associated with the client computer; and at least one of: 
user-specific information, including at least one of: 

user preferences that can be used by the server to filter the content; 

and 

10 access rights that can be used by the server to limit access of the 

user to the content; and 

device-specific information, including at least one of: 

device attributes of the client that can be used by the server to 
customize the content so that it is suitable for use on the client; and 
1 5 date of birth (DOB) of the client; at least a subset of the user 

preferences, access rights and device attributes being dynamically modifiable by 
any combination of the user and a client program executing on the client computer; 
and 

the public PIN, user-specific information and device-specific information 
20 being transmitted to the server by the client to enable the server to appropriately 
configure the content to be downloaded to the client. 

2. The UMID system of claim 1 , further comprising: 

a secret PIN associated with the client accessible to the client and the 

25 server; 

wherein the secret PIN is used by the server, when the content is encrypted, 
to generate a decryption factor with which the client, in conjunction with the secret 
PIN, can decrypt the encrypted content. 

30 3. The UMID system of claim 2, wherein the secret PIN is stored on both the 
client and the server at birth. 

4. The UMID system of claim 3, wherein: 
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th e secre, PIN stored o„ ,he die is eneryp-ed P™< » « » "* " 
rfn key aenvea a, leaa. part* us,n g «-* i— - 

user. 

f ioim 1 wherein the secret PIN is generated by a 
e < The UMID system of claim 1, wherein 

5 5 - , nn th e client and is transmitted to the server in a 

client secunty program executing on the client 

secure manner. 

, The UMID sy,enr of Cain, 5, wherein .he aeere, PIN is g enera,ed usi„ g a, 

10 ' eaSt On ;o f har WsoHware eonn.oranon infonoa-ion assumed ,o he un iq ue for 

the client; , 

(2) patterns of bits in selected files stored on the client; and 

(3 ) a set of b.ometric information associated with the user. 

15 <■ w, m * wherein the biometric information includes 

7. The UMID system of claim 6, wherein me 

at least one of: 

handwriting characteristics; 
one or more fingerprints; 

20 voice print; 

retina pattern; and 
typing pattern. 

8 T »e UMID sys.em ofola.ro 6, wherein, when ,he secre, PIN is 
25 us ,„ g «he — InfoCon, rhe seere, PIN is no, srored on .he Cent 

<■ to;™ (s wherein the secret PIN is stored on the client 
9. The UMID system of claim 6, wherein me 

in a secure manner. 

30 10 TheUMn,o,e 1 a im 9,wherein,whennneseere.Pm,denvedu S1 n g .he 
3 Le.,e i nfo™a. 1 on,p ri0 r,o,ora 8 e fc e S eore.PIN,se„er W .edw.^ 
encryption key derived a. leas, partially nsin g .he bionretttc tnfonrtat.o. 
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11. The UMID of claim 1 , wherein the public PIN, user-specific information, 
device-specific information, and date of birth (DOB) are stored on the client at 
birth. 

5 12. The UMID of claim 1, wherein the public PIN, user-specific information 
and device-specific information are generated by the server in response to 
questions answered by the user and then downloaded to the client. 

13. The UMID of claim 1, wherein: 
1 o the user preferences include: 

types of content in which the user is interested; 

image type; 

color depth; 

image scaling; 
15 display attributes; 

the access rights include blocking rights; and 
the device attributes include: 

memory size; 

connection speed to the network; and 
20 client device locality. 

14. A method for providing digital rights management in an open, networked 
environment wherein a client computer is employed by a user to download content 
from a server computer via a network, comprising: 

25 assigning the client a secret PIN; 

registering the secret PIN with the server; 

assigning the client a universal mobile ID (UMID), which includes: 

a public PIN associated with the client computer; and at least one 

of: 

30 user-specific information, including at least one of: 

user preferences that can be used by the server to filter the 

content; and 
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access rights that can be used by the server to limit access of 
the user to the content; and 

device-specific information, including at least one of: 

device attributes of the client that can be used by the server 
5 to customize the content so that it is suitable for use on the client; and 

date of birth (DOB) of the client; 
associating in the server the secret PIN and the public PIN; 
determining content stored on the server to be downloaded to the client; 
customizing content to be downloaded to the server using at least a subset 
10 oftheUMID; 

encrypting on the server the content to be downloaded; 
downloading the encrypted content to the client; and 
decrypting on the client the encrypted content using a decryption key 
derived from the secret PIN. 

15 

15. The digital rights management method of claim 14, further comprising: 
associating with a content item a respective content key; 
encrypting the content item with the respective content key; 
determining from the content key associated with the content to be 

20 downloaded and the secret PIN of the user a decryption factor; 

the client employing the decryption factor and the secret PIN to derive the 
decryption key without which the client cannot access the encrypted content. 

16. The digital rights management method of claim 14, wherein the secret PIN 
25 assigning step comprises setting the secret ID at the time of manufacturing of the 

client. 

17. The digital rights management method of claim 14, wherein the secret PIN 
assigning step comprises generating the secret PIN using a client security program 

30 executing on the client. 

18. The digital rights management method of claim 17, wherein the secret PIN 
generating step comprises generating the PIN as a function of at least one of: 
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(1) hardware/software configuration information assumed to be unique for 
the client; 

(2) patterns of bits in selected files stored on the client; and 

(3) a set of biometric information associated with the user. 

5 

19. The digital rights management method of claim 18, wherein the biometric 
information includes at least one of: 

handwriting characteristics; 
one or more fingerprints; 
10 voice print; 

retina pattern; and 
typing pattern. 

20. The digital rights management method of claim 14, further comprising 
15 storing the secret PIN on the client in a secure manner. 

21 . The digital rights management method of claim 24, wherein the step of 
storing the secret PIN on the client in a secure manner comprises: 

when the secret PIN is derived using the biometric information, encrypting 
20 the secret PIN with an encryption key derived at least partially using the biometric 
information, neither the encryption key nor an associated decryption key ever 
being permanently stored on the client, such that, when necessary, the client 
derives the decryption key and the encryption key using the biometric information. 

25 22. The digital rights management method of claim 14, wherein the UMID 
assigning step comprises the server generating the public PIN, user-specific 
information and device-specific information in response to questions answered by 
the user and then downloading the UMID to the client. 



30 23. The digital rights management method of claim 14, wherein: 
the user preferences include: 

types of content in which the user is interested; 
image type; 
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color depth; 
image scaling; 
display attributes; 
the access rights include blocking rights; and 
5 the device attributes include: 

memory size; 

connection speed to the network; and 
client device locality. 

,0 24. The digital rights management method of claim 14, further comprising the 

step of: . 

allowing any combination of the user and a client program to dynanucally 
m0dl fy at least a subset of the user preferences, access rights and dev.ce attnbutes. 

15 25 The digital rights management method of claim 24, further comprising: 
when the device attributes include memory size, allowing the client 
program to dynamically modify the memory size in accordance with memory 

available in the client; and 

the server modifying the content accordingly so that the content 
20 downloaded from the server fits in the memory available in the client. 

26 The digital rights management method of claim 24, further compnsing: 

when the device attributes include connection speed, allowing the client 
program to dynamically modify the connection speed in accordance with current 
25 speed of client connection to the network; and 

the server modifying the content accordingly so that the content 
downloaded from the server is compatible with the connection speed. 

27. The digital rights management method of claim 14, wherein the content is 
30 for-pay content, further comprising: 

paying the server for the content prior to the downloading step. 
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28. A secret PIN associated with a client configured to download encrypted 
content from a server, wherein: 

the secret PIN is accessible to the client and the server; 
the secret PIN is used by the server to generate a decryption factor with 
5 which the client, in conjunction with the secret PIN, can decrypt the encrypted 
content; 

the secret PIN is reliably generated by the client anytime it is needed; and 
neither the secret PIN nor data used to generate the secret PIN are stored on 
the client. 

10 

29. The secret PIN of claim 28, wherein the secret PIN is generated by a client 
security program executing on the client and is transmitted to the server in a secure 
manner. 

15 30. The secret PIN of claim 29, wherein the secret PIN is generated using a set 
of biometric information associated with the user. 

3 1 . The UMID system of claim 30, wherein the biometric information includes 
at least one of: 

20 handwriting characteristics; 

one or more fingerprints; 
voice print; 
retina pattern; and 
typing pattern. 

25 

32. A dynamic, universal mobile ID for use in a client computer configured to 
download content from a server computer, comprising: 

device information that describes configuration of the client; 

at least a subset of the device information being dynamically modifiable by 
30 the client computer; 

the dynamic universal mobile ID being transmitted to the server computer 
to enable the server computer to customize the content to be downloaded to the 
client computer; 



0044119A1 I > 



PCTAJSOO/01744 

WO 00/44119 



30 



. u-um reclaim 32 wherein the subset includes 
33. The dynamic, universal mobile ID of claim 

device parameters impacting at least one of: 

size of the content that can be stored in client memory; 
handwidthofthe content that can be transmitted between the cheat 
r conlD uter and the se^er computer; 

oompiexi.y of the co„,en, una, can be accessed by ft. ciien, compu.er, and 
geographic relevance of the content. 

34 . The dynamic universal mob.le ID of claim 32, wherein the device 
10 parameters include at least one of: 

' oerwo* connection speed between she alien, and serves computers, 

available network capacity; 
processor capability; 
available processor capacity; 
! 5 available client memory; 

client geographic position; and 

client time zone. 

... m Af Haim 32 wherein the content is 
35 The dynamic, universal mobile ID of claim 5i, 

.he server downing .be subscription content as appropriate ,n a pusb 
mode operation. 

25 36 . Thedyaan.ic.univer.a^obUelDofdainrBS.furtbercompnsi.rg: 

payment information; . 
LTervetchargingtbecben. for downtoaded subscription content as.ns.be 

payment information. 

37 Tbe dynamic, — nrobile ID of Cairn 35, wherein .be server cnarges 
, h e M for downloaded aubscriptron content using payment informal 
forwarded to .be server by ft. server in a separa,e relation operate 
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38. A method for enabling a client computer to download and use encrypted 
content from a server computer, comprising: 

a registration phase, including: 

the client transmitting to the server a secret PIN associated with the 

5 client computer; and 

the server associating with the secret PIN a public PIN associated 

with the client computer; and 

a downloading phase, including: 

the client issuing a request to the server for the encrypted content; 
1 o the client identifying itself as the source of the request using the 

public PIN; 

the server looking up the secret PIN using the public PIN; 
the server generating a decryption factor based on the secret PIN 
that can be used by the client in conjunction with the secret PIN to decrypt the 
15 encrypted content; 

the server transmitting the encrypted content and the decryption 

factor to the client. 

39. The method of claim 38, further comprising: 

20 the client deriving a decryption key using the decryption factor and the 

secret PIN; 

the client decrypting the encrypted content using the decryption key. 

40. The method of claim 38, wherein: 

25 the encrypted content is for-pay content; 

the registration phase includes the client forwarding to the server payment 
information; and 

the downloading phase includes the client authorizing payment for the for- 
pay content. 

30 

41 . The method of claim 38, wherein: 

the secret PIN is reliably generated by the client anytime it is needed; and 
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neither the secret PIN nor data used to generate the secret PIN are stored on 
the client. 
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